Oleks.
SENIOR DEVOPS ENGINEER / DEVOPS TEAM LEAD
‘‘DevOps is not a goal, but a never-ending process of continual improvement’’ -Jez Humble
Hi, my name is
About Me
For 14+ years I’ve been building and running production infrastructure across AWS, Azure, and Kubernetes — turning fragile, manual operations into resilient, automated platforms. Today I lead a 10-engineer platform team operating a multi-cloud estate (AWS EKS + Azure AKS) spanning 4 AWS accounts, 4 environments, and 80+ production applications.
My focus is GitOps-driven delivery (FluxCD, Helm, Terraform), a hardened software supply chain (image signing, Kyverno policy enforcement, CI/CD security), and secrets management at scale (HashiCorp Vault, OpenBao, SOPS). I care deeply about cloud security, observability, and mentoring the engineers around me — and I’m increasingly weaving AI tooling into how my team ships and operates.
A big part of my day-to-day is SRE work: keeping high-load, latency-sensitive production systems up and reliable under real traffic. That means driving on-call and incident response, tracking SLIs/SLOs and error budgets, chasing down performance bottlenecks, and building the observability (Prometheus, Grafana, Alertmanager) and automation that make outages rarer and recoveries faster.
Here are a few technologies I've been working with:
Cloud & Kubernetes
AWS EKSAWS EC2AWS LambdaAzure AKSIBM CloudKubernetesHelmKustomizeKyvernoDockerIstioNGINX Ingress
Infrastructure as Code & CI/CD
TerraformTerragruntAnsiblePuppetBashGitLab CI/CDJenkins PipelineGitOps/FluxCDDrone CIArtifactory/JFrogDocker image signing
Observability, Security & Secrets
PrometheusGrafanaAlertmanagerNagiosCheck_MKHashiCorp VaultOpenBaoSOPS/AgeAWS IAM/IRSAKMSCognitoOIDC
Data, Networking & Systems
PostgreSQLMySQLMongoDBRedisRabbitMQOracleCloudflareHAProxyNginxLinuxVMware/ESXiProxmox
Experience
Lead a platform/DevOps team of 10 engineers, owning multi-cloud infrastructure (AWS + Azure) across 4 AWS accounts, 4 environments, and 80+ production applications.
- Operate Kubernetes at scale across AWS EKS and Azure AKS, standardizing cluster architecture, upgrades, and workload delivery across cloud providers.
- Drive GitOps delivery with FluxCD, Helm, and Terraform, maintaining consistent infrastructure-as-code across a multi-account, multi-environment AWS and Azure estate.
- Enforce Kubernetes security and compliance policies with Kyverno, reducing misconfiguration risk across the application portfolio.
- Harden the software supply chain with Docker image signing/verification, container/Docker registry controls, and security scanning built into GitLab CI/CD pipelines.
- Manage secrets and credentials at scale using HashiCorp Vault, OpenBao, and SOPS across Kubernetes workloads, CI/CD pipelines, and infrastructure automation.
- Own identity and access architecture, including AWS IAM/IRSA, Cognito authentication, and cross-account access patterns for least-privilege workload access.
- Architect edge delivery and security with Cloudflare (CDN, Cloudflared tunnels) for secure, performant application exposure.
- Provision serverless and containerized workloads with Terraform across AWS (Lambda, EKS, RDS, S3) and Azure (AKS).
- Support MongoDB and PostgreSQL/RDS platforms alongside container registries for a large multi-tenant application portfolio.
- Evaluate and integrate AI-assisted tooling into platform engineering and DevOps workflows to improve delivery efficiency.
- Mentor and manage the 10-person engineering team, owning technical strategy, incident response, and cross-team release coordination — run in parallel with the Clarifi Health engagement below during 2024-2025.
Technologies: AWS, Azure, EKS, AKS, RDS, S3, Lambda, IAM, IRSA, Cognito, Kubernetes, Kyverno, Terraform, FluxCD, Helm, GitLab CI/CD, Docker, Docker Registry, Docker image signing, HashiCorp Vault, OpenBao, SOPS, Cloudflare, Cloudflared, MongoDB, PostgreSQL
Own cloud-native infrastructure for healthcare workloads running on AWS EKS, balancing reliability, security, and compliance requirements.
- Operate and upgrade AWS EKS clusters, including node group maintenance, Kubernetes version upgrades, and production readiness validation for application deployments.
- Lead GitOps-based delivery with FluxCD and Helm, standardizing environment-specific configuration management across environments.
- Provision and manage AWS infrastructure with Terraform — EKS components, IAM roles, IRSA, networking, and service dependencies.
- Drive automation of operational tasks and server configuration with Ansible and Bash, reducing manual deployment effort.
- Build and maintain GitLab CI/CD pipelines spanning application and infrastructure delivery.
- Support PostgreSQL platforms (RDS and EC2-based), covering operational diagnostics, backup strategy, and performance troubleshooting.
- Implement observability with Prometheus, Grafana, and custom exporters/alerting for Kubernetes and database platforms.
- Enforce least-privilege access via AWS IAM roles, IRSA, and Kubernetes service accounts for secure workload-to-AWS-service access.
- Lead production troubleshooting, incident analysis, release activities, and infrastructure change reviews across teams.
Technologies: AWS, EKS, EC2, RDS, S3, IAM, IRSA, CloudWatch, Kubernetes, Helm, FluxCD, Terraform, Ansible, Bash, GitLab CI/CD, PostgreSQL, Prometheus, Grafana, Alertmanager, Docker
Led DevOps activities for a team of seven engineers.
- Implemented and supported CI/CD for deployment marketplace services.
- Stood up and supported Kubernetes infrastructure on AWS.
- Managed AWS infrastructure and environment changes with Terraform and Ansible.
- Introduced GitOps-oriented deployment workflows with FluxCD.
- Supported databases, middleware, backups, monitoring, and alerting.
Technologies: Git, Docker, Kubernetes, Helm, Terraform, Ansible, AWS, EC2, S3, Cognito, EKS, Artifactory, MongoDB, RabbitMQ, Redis, PostgreSQL, GitLab CI, Bash, GitOps, FluxCD, Consul Mesh, Prometheus, Grafana
- Built and supported CI/CD pipelines for a media de-identification platform.
- Deployed and operated Kubernetes workloads on AWS EKS.
- Managed AWS infrastructure as code with Terraform, provisioning resources across application environments.
- Automated deployments with Helm and GitLab CI.
- Supported operational troubleshooting and backup workflows for databases and middleware.
- Configured monitoring and alerting with Prometheus, Grafana, and CloudWatch.
Technologies: Git, Docker, Kubernetes, Helm, Terraform, Ansible, AWS, EC2, EKS, S3, CloudWatch, Artifactory, MongoDB, RabbitMQ, Redis, PostgreSQL, GitLab CI, Bash, Node.js, Istio, Prometheus, Grafana
- Supported Kubernetes-based infrastructure for a hardware management platform.
- Implemented CI/CD workflows and release automation.
- Managed infrastructure changes with Terraform and Ansible.
- Ran Kubernetes workloads on IBM Cloud alongside related application infrastructure.
- Handled database and middleware operations, including troubleshooting and backup support.
Technologies: Git, Jenkins Pipeline, Linux, Ubuntu, Docker, Kubernetes, Helm, Terraform, Ansible, AWS, EC2, S3, Artifactory, MongoDB, RabbitMQ, Redis, PostgreSQL, MySQL, MinIO, IBM Cloud, Bitbucket, Bash, .NET, Prometheus, Grafana
- Implemented CI pipelines for dedicated environments.
- Supported Linux-based infrastructure and containerized workloads.
- Maintained Jenkins pipeline automation and deployment tooling.
- Supported AWS infrastructure and artifact management workflows.
Technologies: Git, Jenkins Pipeline, Linux, Ubuntu, Docker, Kubernetes, Helm, Ansible, AWS, EC2, S3, Artifactory
- Automated provisioning of Windows and Linux EC2 AMIs.
- Built shell and PowerShell automation for infrastructure and build workflows.
- Supported CI automation with Jenkins and Docker-based workflows.
Technologies: Python, pytest, AWS EC2, AMI, Docker, Jenkins, Make, Bash, PowerShell, Linux, Windows
- Automated setup and configuration of application servers and infrastructure components.
- Established CI/CD workflows for enterprise application delivery.
- Containerized application servers and supported Docker-based infrastructure.
- Supported web, middleware, database, and monitoring components across Linux environments.
Technologies: IBM WebSphere, JBoss, WebLogic, Tomcat, Geronimo, Oracle RAC, MS SQL, MySQL, PostgreSQL, Docker, Docker Swarm, Docker Machine, Docker Compose, Docker Registry, Jenkins Pipeline, Linux, Ubuntu, JFrog, NFS, Samba, Apache, Nginx, HAProxy, Git, Puppet, Ansible, Nagios, Check_MK, AWS EC2, BMC Cloud, VMware, KVM, VirtualBox
- Built Linux and Windows application installers with GUI support.
- Automated installation workflows using Bash, PowerShell, Git, and Ansible.
Technologies: Linux, Bash, Git, Ansible, PowerShell
- Provided technical support for workstations, corporate network services, printing, file services, and meeting room devices.
- Supported source control, mail services, virtualization, and Linux/Windows environments.
- Troubleshot infrastructure issues and maintained operational services for internal users.
Technologies: Active Directory, LDAP, Apache, Nginx, SVN, CUPS, DNS, BIND, VMware, VirtualBox, KVM, Bash, Batch, Linux, Unix, Windows, CMS, Security, IMAP, SMTP